last executing test programs: 4.945307585s ago: executing program 0 (id=1): r0 = syz_open_dev$loop(0x0, 0x4, 0x20040) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) writev(r3, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4, 0x0, 0xdffffffd}}, 0x2e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00fc6d020697fb96a2000000000000000000000500050002000000050001000700"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000090601020000000000000000070000000900020073797a3100000000050001000700000028000780180001801400029798511e7d7e103290c640fc000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x141a82, 0x10b) 4.268416321s ago: executing program 0 (id=6): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e21, @empty}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lremovexattr(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0xfffffffffffffe57, 0x7, 0x1}]}}]}, 0x40}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x22020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r9, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.85225791s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe2$watch_queue(&(0x7f0000000040), 0x80) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000006800128009000100766c616e000000005800028006000100020000004c0003800c00010000000000050000000c00010000000000800000000c00800000000000018000000c00010009000000010001000c00010000000000090000000c000100030000000101000008000500", @ANYRES32=r9], 0x90}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007a000904340102d469e7000905", @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340), 0x4) 2.684141087s ago: executing program 0 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x10, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x3, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80400, 0x0) socket(0x10, 0x803, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000100)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() mmap(&(0x7f0000b0d000/0x2000)=nil, 0x2000, 0xe8f662ac924670ec, 0x4010, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, 0x0) 1.969636618s ago: executing program 4 (id=5): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x17e) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffa, 0x2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0xfd6, 0x422500) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40044149, &(0x7f0000000100)=0x3) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0xb, 0x4, 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab6") ptrace$setregs(0xd, r7, 0x0, 0x0) r8 = syz_open_dev$cec(0x0, 0x0, 0x80) ioctl$CEC_RECEIVE(r8, 0xc0386106, &(0x7f0000000000)={0x10, 0x7, 0x1, 0x2, 0x0, 0xa, '&\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1.471748221s ago: executing program 2 (id=3): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3f6}}, 0x420}}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES16, @ANYRESDEC=r3], 0x48) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000903e88fe42f3ba312bc97701dce7a09f08c12af15bda3f7b37c96d0a71258b9e9732e3e069f53f69b7fda44a800968d7757fd65201ecbd1af412bbf2598856daffaf88cd5b4b32285cf4b1c2e1ab01bf32b5d98719de7c86cd668705f1792c166dda558b10c7c5952fc3f2628085b444663655307f30000bd98563fc2fd7975745848c96e9739b27db5b2fb2d3f895186b1de0a34cd0fbc42c7a2c78e3294f0c02d7ca48048a33db3d90e3447605955aac8ffc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="186491a191000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff77000000080000001822", @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r10, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.468063986s ago: executing program 1 (id=2): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x2a280) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x30}, 0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000000480)={0xfffffff7, [0x4, 0xff, 0x3], [{0x2, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x389b844c, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x5, 0x0, 0x1}, {0x6, 0xd, 0x1, 0x1, 0x0, 0x1}, {0xe776, 0xffffffff}, {0x73bd3228, 0x24, 0x1, 0x0, 0x0, 0x1}, {0x6a0064ca, 0xf6, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x101, 0x0, 0x1, 0x0, 0x1}, {0xc699, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x4, 0x0, 0x1, 0x1}], 0x805}) socket$xdp(0x2c, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x3000000}) write$smackfs_netlabel(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='0000000000009:0000:2'], 0xfffffdef) socket$nl_route(0x10, 0x3, 0x0) 1.332133736s ago: executing program 4 (id=8): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x11, 0x10ffef8, 0x15, 0xa, 0x20000050, 0xfffffffc, 0x0, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={&(0x7f0000000440)="a306d22f2b25681a18b40ea1a399a0647b365eae9ee2081499d14d1ce511bd9e199cf158ab9b681ef65f02711ce0947eba9b485f6aacaecf6c6a350bdfdfd71f6515055a6d24a6961e269d9e7ab97d6b9f31c23556cfcf48bf782b852453dce363199d6d68de3771450b0ea76c2e38520512c70e83814b49ad55779b0de1202aae38a553db788207d6302f664446c4ca4aeac822f835c3cae25230d868456f3170895b66097beda11e9ca49d99", &(0x7f0000000100)=""/48, &(0x7f0000000780)="a6d048fa4750046396160872d3fc85ee7a3b927da23fb4cda38293159687d48745c5f79b104bb5739f9c67eabe3e04541d398e8ceb27795ea559d0a81fa084e0345b58e1992ac2110c8ee571bc0642a8347499b81c230adfb5455eb07feee2c9ca1f59b5d0ae700df6574eecb02e3d8046fc100c83eac81347556d74c30e7b5a2aebb9d1c2e3901f156eb3f02a17e770bc6406407d37bc4a7e70212a4b85ae73384a8cd43cbf03569baf9c9ae071b2deb7958b072e7f105e152500ca0f3dabfb28f1b9da573f6572bee320e7237b89a5435a657a914d0eed2861fadd30dda0c4825911e6b372e172dd60b82c67f38d19f4e8a503cb11cf07bd95bd5d60f1cd1792481a7b4448b268d81ffaaaad0da37dff8283b5efd6426531fcdfbec337418b27f100d9ec5ef102b3dad6f9e1ae24e65a2b666dc9b63f1d018c1887d9379113a2014efc2e06ed51eabdd2256d8aa07f598bc6b8a97c05e1de683e82ef650ed1f45848ce6b8258a9c26aea3fdef88471802b05fdbba3dd9b325e7267a1bed0e019e6618b42e19967f54f6a0746102a606ce889d26db43b3bba7d8ca9502c88035150e3c0dbc59727f72c408e9580908e53106af1ea4119717b4245bac07e102c9735012b39f1b4662ee56dc0423bc3cf4e05d51cf3f4accd51f65566f23122f5d47bac6a8c585b916e73aaa732a879aea5a283bf1f59c6bdeb5f688f5d9759d15fb8b2efee9434c83d815f9faf91c9355d027a8b059fafbbe4c6c0194751ab3dbe47aa73881519cb4ecae487f95742b01e956103d8db8df08ba641098ed74e1f2db816c2cc3bff151972a42ef48781b048caf17c2af244fcdcab4703e939c8474fa2860e09addf9cf7e7db127f7453880d87d6ea0d204ffb2b558081c7b37fca3677c7164871167d37994930a5a512ee19a8734cb3bc403fc0c6f889a7caf15ebcc5c922fd2fc548caa0ef49b092d5bd78ea08ffe3e6a54c6d55ddc07c784a5badacc53aa05a4f10c9c92ef5e9fefe5629a74184150104fcbc9b5a31cfbe96edbb08d697008313c13c05e6807ed9a1de59dabb29a249a3da02909ef62de11bb2f83276c07f23af616c87f948000f751167eabfe16ffff249ed3e4b6fdd5a8df22716dcd1ca6a126d9f04ade394d0f7ee9724c23bc19703412d49a71564991bc4092f7c1576ba4d6b5144d3a8fc1cf04208d2bbe1d39b43bdaad7cf051fc19f14f8634635c4dd5b1d1bd755f4108db7c7c9d25776e44c131199d7a69e49c0ff7a790d61c249fe2203d5014f6130eb9ad9f59ce591cc878e170a5020236836b8b5ef68a5a252a00d2afc93eb6514484a4aea837d729e0311a3b00923deafbe64ca16c0b974813b8f67b75895bcb801e9ca86b2a980dd7df6826f3b30cfb4b9df173d8a328465ae68fa4c26a2a041f91e02d644db434b3bbfce3fc8af37ac07ddf32f3c9a97ef39709a07431e3477bd706fc26224600299942ba4b242bac7103b0d466815f8d32366202f5bfe8eaaa02adbf7fc33d0c676386464f46b9f14b7c6cc69448e4e941d2971b5d8f1dabede47c1678cef9b6e3c7738cab9d4303f56ed4ffabbc2aa750863803f09777e97e8f7fd1673ee4bd573983fe3dcf09d46bccb760f7446e08cfd1762db7e5e9ff58b701e0fdb11399ed7efaeaa170bde397f0bc7920b5fb1cccc9da88aae7f15abeae6017fe0e4cf94979dead54396d59fdc9099ec719187207ea0088b8c1ba25302477251ecabc694d137bbbd38da5c7037cc1f424ec8f2f1f3fb2e1cb86cd575c7a7f8bfb0d6e540a5ed29c044b04a6b3258dbc79f67d8731084896e2e125fca82c456de373c7e7d9486def0e5039bacc1181d1b879dc4bb51a95df4d3a82bb8c56765b588ec2afad71f22bc898ccd4c408ee5e4cd933453d93874694b74e979b69620a6256d319837f82c0154ce1ebbda9040f3dd4d6ebe1e9ee4c0c402d540b5685539ba9d31a9685251be8a7854d924db1e14f345b8b5e8e1374491c0856e3eaa639ad1b007788f3f44ac8394c33911507a4d8cf087f4eb4240f37dbf08fa29c1139a4eed334d0f8a477f59b39ed74afedf64c616a9acf0b5b8c22b38a76357a3596b44e775d3349039e0312a6562537dc17fb2aff5c5b6d50dbd0c990a480a11c1bb27df957a800b057e3ddbd40c2e7c9761645229854ed0eabcacaac493b57c435e451206dc84b43593910cc11e2e4ddb1797abbeb90dfc3e3685a1bb9d958c9fd0c5077b41b1d4189825a35ce598dca4efe80c52d963d26b495f2acec76b43642abf11df7013a8773d188221f057aac55d41bc5c6b09d2ff6f208845db2c4953a3173e4f0753494297027fc9e57bc3afbd4fb270550f8981adbd1823f40400d21a47c30b2eed4c452caf30d53d340a14a729204425a200f41c9d5d52a181d3b7073d285fc36c240dfac7aeff5fe779bccf5cf8633bb090c951f7d84a87ce4715525211ec1d452f9995b2c97e632ecdb3cdb2257373eb976cb83ed120f1d3718d9c91ec4dccb4657f24c8ead28953d1a3cd1ad9ac62172995b4fd5286bef22ffc784534e7c02239a62d53814aa1234e69b4f0cd32857c8d40c1ae335fc465a09ec7c35e3f90f1c8b97610e211f269b4ceee99b8f96f3ddff0d105fa18238d909c55c5ce4df8c78c92b0f9aa950020460b04919884f0f49c16a54f784ca4b5ad88fd99bf3af1f2e7c2e472bb3407f44965da40dbfaa1b1b03e153f2e388e4ce17837aa7aad487432450b3a8b656383e9e4a0ae7c16e56762b590a198aa8bd354b039155ab87c1dce0249ebbb192d32c2c69554abe67e6251e4d2fd9ceeb4c73db3766c8ea2cb8d024e53c94bb16f62ed5b08980ac7d4ff7d732a553837bc0d9167847dba9d02b23043ef4c010b32414dbf198d18e0390ef558fde4d0e4fc4b676bf1ba4e26bcec5ea9ef679c2ad1bdd293c28eefe1d776dbfbd265fae4a1457dbaad9c65a16715b66d71ec1496b34127205177b823f665fe85c6101b2a1c032a70f6ce2e327a7a435e2dadd907469f24f101a8ef549bc8b1493f5bbe3d4a7d64a55116977409a52a2fa8b211967af190c520a9587948ed301d48862d58ca93941a2be2bc1dab75c94963b99c14d06bf1d06144fc54101ae07ba5350853d0a7e714a3b18eec298dde9fce13c389023698b1f2f571c5c14e1c3d23d1319745768565ded4a3b339c8a4e8e751c6826a7776fa0229dce3b2540fb00c6cec40b56f3408a3cba339b52045a9235b2a756bc7223991a4c2df3f03a74de04c9fa38c05f955fc41eddb4d5d1bf020abe330cc750836c8e91d89d74cb6b0a0c7b223f919d225e5d37a0d27070f71ae9be45d136ff84b6dd20fd98dfe816eac420d056a24cec3b13dc584d85be5224eb0e3a47deea6f88bcf7a9149a310f75c803498fa759c9d37368fb077d46fdf9cc0a55f6199e618951e491df197e5ebdedc12d5fc1b9058887fe8e86a11a7a72e2a981fc27f6182b3e3db2b5a8b659b4e5ed1bfa1610846962f91f41b9cad91754fcb097317b2eba53c367ee0c6a383ee465f673eb0bf954bb23063b8a81001afdf06388c8fdc60a6bace4464ea06ba28168a55cf4bf0aea47cd62558e49a1aea97d250c39f53d4b71fe288a017d6d64bbb05b649c0785b4eeb5d3efc0e06f0399c65ccd54ecc8ea9a8286b3d9e42ededbc9a97f709287fa2568ce916d99b0a7aeb792186e675dabdf09b4e0ca47b39c7e7d3a16ba5d77dc9276f128cbd4170bbae4e3f47b8e4e751ca1efe92cdb4e2071f95dff0e55a97b2d9f6367ea84c005ff8aa0556cc085e2b2718672653d0424596a547a4df5493b5fbc0b032a70556d8f372c516233ce1d040a3df4e69966db74955b422ecf05851e21556a69de992482865175fc65309ee85832cbdcde5ecec338d1686d7bc04023db03f230af64c35ffddda59cf75df3ea32b7850e8c65988dd37d0cb20a9074262d779ba2e346a73c42a5ac0c01b51f2a0d0e740395f3f4ff3eaa2f8aab4f786450c0c157eb6a4e90e4408ece1716a51c0b11e8d194b29c26a33ab435bb4aa624d5b6233e2862a3eb43e050f6e042aa87f393e3e2589a777672b2f91baef18a66129506f514e9e94f25c3e688dde68228b06af16330b22bd5b51da45400de0293ea56b5badbed48eea4f6255f81b2281d063cd823458ecc7111ca31e28f2ee32a6343f6e35c47edd2af4b9b79d2ac165c4d44dafb416b199e5f8ddeae4e7ee1e95c47b3b338ce51d9beed3a2c9e57b27cb735ef9b79545127cc1608dfc638a3f7e35fa012dad82ad9293efaf6cf052234b5aa2d708f6d52848d5d9f6e928fd5f278c9689f790f48321fdf94f2da35dea1e8e32041fca83c84584ccbbc807b1808495ec83edcad58f1bfd5eb9ab965a33bcc3ecd3b902a5ea487583b8ab77bc1c822369c79e1bfb08c8a2bf3a1fbb5a643191c04c3a9dae40c8090e50001da9a77fa49222d940743f49b7efcfe58fa63889e9ca67452799599aa8a6fee0e92c547fca03bd1c2444be2328272911cfb68851a9e3099e9bab902982476c7d78bd790dba79a61e3ed2d84133a28a9403b0decdf540e4ea6f8b65b0cb5f5e8e1af3e8d5d7600bf025d25fe7253f95cecc38b83d935749ef169304b37adeb8fc6097551e02f20745b7f43ebd82172c965a8fb258e55b4ed16ff21852da38ce0300a54de3fc8d4adc5fcfc89b0debfd33cbf83e0207da002065483dd9d61fe63f85f540007435d0eeb212ab2e5de3930fd2f53704b153ba69dab6081c31833676af9897e4fce7f7ca0538a5c823cf532d8bb66048fa74528df7a4d940996ee0e427febd3cab4cef80a411736a23cace6c510f4a7767e5cb821890682aebb09a83dc16eb4495ff491ee911a79ea29587704b3aec069d581d0946e6aef2ce6b82debc3204e4b3ddc690c8da5fcf2e92b670a8213db34bf89f30c5b5390471c45d7aacaa11081e64923288047ec2ef34ed3cf63c7fef84ed941713e22db1c26b80a2aef5765ea8ef0507c4a47d5416d0d7d31fe168b8eb85265f317f065a61a1401f848d35e697549112504d1c0c0c91d5f8c565", &(0x7f0000000180), 0x7}, 0x38) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r7 = openat$cgroup_int(r1, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000600), 0x12) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) r8 = dup2(r0, r0) write$tun(r8, 0x0, 0x46) recvmmsg(r8, &(0x7f00000000c0), 0x0, 0x2000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES32=r5, @ANYRESOCT=r2], 0x0) 117.240389ms ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xfe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000140)) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) listen(0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x8000, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x40000000000004, 0x2, 0x5, 0x3, 0x10008000000008, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) sendmmsg$inet(r1, &(0x7f0000002f00), 0x0, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(r3, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x80000000}], 0x1, 0x40008062, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 0s ago: executing program 2 (id=10): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0x23, 0x5, 0x0, &(0x7f0000000080)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r5) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c00000040000900fffffffffddbdf250100000004001f00640001", @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="737480005966", @ANYRES16=r9, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x8a011}, 0x20000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044880) poll(&(0x7f0000000480)=[{r8, 0x400}], 0x1, 0xc16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. [ 80.208315][ T5819] cgroup: Unknown subsys name 'net' [ 80.317290][ T5819] cgroup: Unknown subsys name 'cpuset' [ 80.325833][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.852556][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.345468][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.373519][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.403647][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.414591][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.433613][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.455229][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.473850][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.482387][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.524532][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.532019][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.540772][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.547934][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.555450][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.604979][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.608377][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.620663][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.634563][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.643330][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.650666][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.658881][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.686597][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.704184][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.704412][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.729113][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.736682][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.943067][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 85.140129][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.148514][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.156019][ T5829] bridge_slave_0: entered allmulticast mode [ 85.163221][ T5829] bridge_slave_0: entered promiscuous mode [ 85.172320][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.179695][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.186924][ T5829] bridge_slave_1: entered allmulticast mode [ 85.195052][ T5829] bridge_slave_1: entered promiscuous mode [ 85.300259][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.313874][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.377337][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.512543][ T5829] team0: Port device team_slave_0 added [ 85.524863][ T5829] team0: Port device team_slave_1 added [ 85.570445][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.636867][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 85.649002][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.656999][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.683163][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.700245][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.707289][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.733267][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.761123][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.860381][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.868039][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.875464][ T5834] bridge_slave_0: entered allmulticast mode [ 85.882489][ T5834] bridge_slave_0: entered promiscuous mode [ 85.890426][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.897808][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.905435][ T5834] bridge_slave_1: entered allmulticast mode [ 85.912546][ T5834] bridge_slave_1: entered promiscuous mode [ 86.056994][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.082358][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.090188][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.101601][ T5846] bridge_slave_0: entered allmulticast mode [ 86.108928][ T5846] bridge_slave_0: entered promiscuous mode [ 86.120749][ T5829] hsr_slave_0: entered promiscuous mode [ 86.127513][ T5829] hsr_slave_1: entered promiscuous mode [ 86.148937][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.163055][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.170431][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.177934][ T5846] bridge_slave_1: entered allmulticast mode [ 86.185307][ T5846] bridge_slave_1: entered promiscuous mode [ 86.205249][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.212373][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.219796][ T5841] bridge_slave_0: entered allmulticast mode [ 86.226893][ T5841] bridge_slave_0: entered promiscuous mode [ 86.235416][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.242565][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.250095][ T5841] bridge_slave_1: entered allmulticast mode [ 86.257954][ T5841] bridge_slave_1: entered promiscuous mode [ 86.361264][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.369713][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.379938][ T5837] bridge_slave_0: entered allmulticast mode [ 86.387324][ T5837] bridge_slave_0: entered promiscuous mode [ 86.397632][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.410217][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.421733][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.434450][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.445830][ T5834] team0: Port device team_slave_0 added [ 86.458629][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.465945][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.473076][ T5837] bridge_slave_1: entered allmulticast mode [ 86.480809][ T5837] bridge_slave_1: entered promiscuous mode [ 86.504050][ T5842] Bluetooth: hci0: command tx timeout [ 86.518871][ T5834] team0: Port device team_slave_1 added [ 86.618478][ T5841] team0: Port device team_slave_0 added [ 86.653956][ T5842] Bluetooth: hci1: command tx timeout [ 86.661904][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.679035][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.695440][ T5846] team0: Port device team_slave_0 added [ 86.705311][ T5841] team0: Port device team_slave_1 added [ 86.715822][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.722781][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.753242][ T5842] Bluetooth: hci4: command tx timeout [ 86.759612][ T5839] Bluetooth: hci2: command tx timeout [ 86.769562][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.782178][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.789678][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.815754][ T5839] Bluetooth: hci3: command tx timeout [ 86.821689][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.841806][ T5846] team0: Port device team_slave_1 added [ 86.957026][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.964040][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.990241][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.030003][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.037518][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.063564][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.076841][ T5837] team0: Port device team_slave_0 added [ 87.084282][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.091228][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.118059][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.142306][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.149786][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.175836][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.193213][ T5837] team0: Port device team_slave_1 added [ 87.223515][ T5834] hsr_slave_0: entered promiscuous mode [ 87.229802][ T5834] hsr_slave_1: entered promiscuous mode [ 87.236015][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.243777][ T5834] Cannot create hsr debugfs directory [ 87.283367][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.290564][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.316917][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.330192][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.337180][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.363085][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.502841][ T5841] hsr_slave_0: entered promiscuous mode [ 87.509512][ T5841] hsr_slave_1: entered promiscuous mode [ 87.516093][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.523775][ T5841] Cannot create hsr debugfs directory [ 87.534290][ T5846] hsr_slave_0: entered promiscuous mode [ 87.540454][ T5846] hsr_slave_1: entered promiscuous mode [ 87.546840][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.555249][ T5846] Cannot create hsr debugfs directory [ 87.583160][ T5837] hsr_slave_0: entered promiscuous mode [ 87.590606][ T5837] hsr_slave_1: entered promiscuous mode [ 87.596922][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.604523][ T5837] Cannot create hsr debugfs directory [ 87.851756][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.901364][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.932838][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.948913][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.111136][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.121704][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.136174][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.165075][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.256084][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.282112][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.291956][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.302852][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.334712][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.396305][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.409359][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.420133][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.454884][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.496807][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.528645][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.536175][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.551618][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.562110][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.581951][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.589129][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.596675][ T5839] Bluetooth: hci0: command tx timeout [ 88.609458][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.619413][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.640490][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.707702][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.720940][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.742576][ T5839] Bluetooth: hci1: command tx timeout [ 88.770101][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.780784][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.787974][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.813835][ T5839] Bluetooth: hci2: command tx timeout [ 88.814323][ T5842] Bluetooth: hci4: command tx timeout [ 88.840512][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.847672][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.859010][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.866109][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.893889][ T5842] Bluetooth: hci3: command tx timeout [ 88.902647][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.909796][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.040485][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.051060][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.159887][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.190441][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.271410][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.290021][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.310553][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.348500][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.355717][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.397265][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.404457][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.418231][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.425453][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.463750][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.470891][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.527721][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.565365][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.578033][ T5829] veth0_vlan: entered promiscuous mode [ 89.618128][ T5829] veth1_vlan: entered promiscuous mode [ 89.750210][ T5829] veth0_macvtap: entered promiscuous mode [ 89.786579][ T5841] veth0_vlan: entered promiscuous mode [ 89.810776][ T5841] veth1_vlan: entered promiscuous mode [ 89.821083][ T5829] veth1_macvtap: entered promiscuous mode [ 89.900696][ T5841] veth0_macvtap: entered promiscuous mode [ 89.937199][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.969113][ T5841] veth1_macvtap: entered promiscuous mode [ 89.990482][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.044017][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.052887][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.062616][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.071798][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084076][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.099652][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.110958][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.132734][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.143790][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.156363][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.192980][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.210779][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.220185][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229867][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.239242][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.282867][ T5834] veth0_vlan: entered promiscuous mode [ 90.347449][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.355864][ T5834] veth1_vlan: entered promiscuous mode [ 90.382534][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.414891][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.518714][ T5834] veth0_macvtap: entered promiscuous mode [ 90.527444][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.538082][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.539006][ T5846] veth0_vlan: entered promiscuous mode [ 90.565648][ T5837] veth0_vlan: entered promiscuous mode [ 90.578513][ T5834] veth1_macvtap: entered promiscuous mode [ 90.596213][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.613460][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.627982][ T5846] veth1_vlan: entered promiscuous mode [ 90.650145][ T5837] veth1_vlan: entered promiscuous mode [ 90.656103][ T5842] Bluetooth: hci0: command tx timeout [ 90.706669][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.717766][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.734136][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.737925][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.744799][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.771986][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.797581][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.810155][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.822778][ T5842] Bluetooth: hci1: command tx timeout [ 90.828763][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.830315][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.849911][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.861209][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.872908][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.891445][ T5837] veth0_macvtap: entered promiscuous mode [ 90.898377][ T5842] Bluetooth: hci2: command tx timeout [ 90.898388][ T5839] Bluetooth: hci4: command tx timeout [ 90.917026][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937986][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.950600][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.960577][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974679][ T5842] Bluetooth: hci3: command tx timeout [ 90.988790][ T5846] veth0_macvtap: entered promiscuous mode [ 91.051750][ T5837] veth1_macvtap: entered promiscuous mode [ 91.059475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.164662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.266967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.575783][ T5846] veth1_macvtap: entered promiscuous mode [ 91.645480][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.657217][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.670785][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.682380][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.692417][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.704676][ T59] cfg80211: failed to load regulatory.db [ 91.710582][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.726313][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.779026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.803863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.812142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.928657][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.045214][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.178994][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.305307][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.422955][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.541127][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.552557][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.564244][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.573071][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.582059][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.590961][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609663][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.640524][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.651355][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.662770][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.672778][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.683552][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693580][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.705030][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.716778][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.734191][ T5842] Bluetooth: hci0: command tx timeout [ 92.890285][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.901674][ T5842] Bluetooth: hci1: command tx timeout [ 92.904257][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.933473][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.944555][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.955788][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.967068][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.978782][ T5842] Bluetooth: hci4: command tx timeout [ 92.978858][ T5927] process 'syz.3.4' launched '/dev/fd/7' with NULL argv: empty string added [ 92.984313][ T5842] Bluetooth: hci2: command tx timeout [ 93.000928][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.014906][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.032230][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.114095][ T5842] Bluetooth: hci3: command tx timeout [ 93.185837][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.217424][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.226486][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236863][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.238852][ T5931] Bluetooth: MGMT ver 1.23 [ 93.263636][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.336459][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.413645][ T5882] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.457453][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.475375][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.523894][ T5843] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.544488][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.552364][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.592537][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.617883][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.625194][ T5882] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 93.625245][ T5882] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 93.625267][ T5882] usb 4-1: config 0 has no interface number 0 [ 93.625318][ T5882] usb 4-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 93.625347][ T5882] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.625372][ T5882] usb 4-1: config 0 interface 52 has no altsetting 0 [ 93.627773][ T5882] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 93.694625][ T5843] usb 1-1: device descriptor read/64, error -71 [ 93.792761][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 93.801830][ T5882] usb 4-1: Product: syz [ 93.809476][ T5882] usb 4-1: SerialNumber: syz [ 93.852218][ T5882] usb 4-1: config 0 descriptor?? [ 93.923311][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.943618][ T5843] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.968713][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.989160][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.003287][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.113554][ T5843] usb 1-1: device descriptor read/64, error -71 [ 94.247991][ T5843] usb usb1-port1: attempt power cycle [ 94.624107][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.686486][ T5843] usb 1-1: device descriptor read/8, error -71 [ 94.944717][ T5843] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 94.994870][ T5951] block device autoloading is deprecated and will be removed. [ 95.003360][ T5951] syz.1.2: attempt to access beyond end of device [ 95.003360][ T5951] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.312591][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.682214][ T5843] usb 1-1: device descriptor read/8, error -71 [ 95.811938][ T5843] usb usb1-port1: unable to enumerate USB device [ 95.903758][ T24] usb 5-1: device descriptor read/64, error -71 [ 96.183796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.593530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.514249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.923746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.260815][ T5956] sched: DL replenish lagged too much [ 201.163406][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 201.170470][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5846/1:b..l [ 201.178635][ C0] rcu: (detected by 0, t=10502 jiffies, g=9925, q=412 ncpus=2) [ 201.186287][ C0] task:syz-executor state:R running task stack:20744 pid:5846 tgid:5846 ppid:5826 task_flags:0x400140 flags:0x00004000 [ 201.200107][ C0] Call Trace: [ 201.203397][ C0] [ 201.206342][ C0] __schedule+0x1b33/0x51f0 [ 201.210896][ C0] ? is_bpf_text_address+0x288/0x2a0 [ 201.216208][ C0] ? unwind_get_return_address+0x41/0x90 [ 201.221894][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 201.227225][ C0] ? __pfx___schedule+0x10/0x10 [ 201.232095][ C0] ? stack_trace_save+0x11a/0x1d0 [ 201.237147][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 201.242472][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 201.247609][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 201.253369][ C0] irqentry_exit+0x5e/0x90 [ 201.258057][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 201.263528][ C0] RIP: 0010:unwind_next_frame+0x19e/0x23b0 [ 201.269343][ C0] Code: 24 24 4d 8d 74 24 35 4c 89 f5 48 c1 ed 03 42 0f b6 44 2d 00 84 c0 0f 85 7d 1a 00 00 4d 0f be 26 48 8b 44 24 38 42 80 3c 28 00 <48> 8b 5c 24 10 74 08 48 89 df e8 83 c8 bc 00 4c 03 23 49 ff cc 4c [ 201.288955][ C0] RSP: 0000:ffffc90003de6c28 EFLAGS: 00000246 [ 201.295035][ C0] RAX: 1ffff920007bcdb5 RBX: 0000000000000000 RCX: ffff88807c48bc00 [ 201.303016][ C0] RDX: 0000000000000000 RSI: ffffffff8ca0e260 RDI: ffffffff8ca0e220 [ 201.310999][ C0] RBP: 1ffff920007bcdb2 R08: 0000000000000000 R09: 0000000000000000 [ 201.318973][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 201.326948][ C0] R13: dffffc0000000000 R14: ffffc90003de6d95 R15: ffffffff816d9bc8 [ 201.334924][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 201.340058][ C0] ? unwind_next_frame+0xe7/0x23b0 [ 201.345447][ C0] ? get_stack_info_noinstr+0x1a/0x130 [ 201.350938][ C0] ? __unwind_start+0xf8/0x740 [ 201.355717][ C0] __unwind_start+0x59a/0x740 [ 201.360754][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 201.366919][ C0] arch_stack_walk+0xe7/0x150 [ 201.371612][ C0] ? __unwind_start+0xf8/0x740 [ 201.376386][ C0] stack_trace_save+0x11a/0x1d0 [ 201.381247][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 201.386632][ C0] ? __lock_acquire+0xad5/0xd80 [ 201.391510][ C0] save_stack+0xfc/0x1f0 [ 201.395768][ C0] ? __pfx_save_stack+0x10/0x10 [ 201.400656][ C0] __set_page_owner+0x93/0x530 [ 201.405429][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 201.412035][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 201.417774][ C0] post_alloc_hook+0x1f4/0x240 [ 201.422568][ C0] get_page_from_freelist+0x360d/0x37b0 [ 201.428137][ C0] ? sched_clock_cpu+0x77/0x4d0 [ 201.433022][ C0] ? preempt_schedule_irq+0x145/0x1c0 [ 201.438442][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 201.444355][ C0] ? prepare_alloc_pages+0x30c/0x610 [ 201.449660][ C0] ? prepare_alloc_pages+0x220/0x610 [ 201.454974][ C0] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 201.460790][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.467133][ C0] ? __lock_acquire+0xad5/0xd80 [ 201.472014][ C0] alloc_pages_mpol+0x339/0x690 [ 201.476973][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 201.482372][ C0] vma_alloc_folio_noprof+0x12d/0x260 [ 201.487773][ C0] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 201.493701][ C0] folio_prealloc+0x2e/0x170 [ 201.498318][ C0] do_wp_page+0x14d7/0x5dc0 [ 201.502864][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 201.507751][ C0] ? __lock_acquire+0xad5/0xd80 [ 201.512626][ C0] ? do_raw_spin_lock+0x151/0x370 [ 201.517685][ C0] handle_pte_fault+0xfaf/0x61c0 [ 201.522649][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 201.528393][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 201.533787][ C0] ? rcu_is_watching+0x15/0xb0 [ 201.538561][ C0] ? __count_memcg_events+0x1e1/0x3d0 [ 201.543979][ C0] ? count_memcg_event_mm+0x96/0x440 [ 201.549281][ C0] ? count_memcg_event_mm+0x96/0x440 [ 201.554576][ C0] ? count_memcg_event_mm+0x388/0x440 [ 201.559955][ C0] ? count_memcg_event_mm+0x96/0x440 [ 201.565253][ C0] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 201.570989][ C0] ? __lock_acquire+0xad5/0xd80 [ 201.575857][ C0] handle_mm_fault+0x1030/0x1aa0 [ 201.580832][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 201.586129][ C0] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 201.591356][ C0] ? exc_page_fault+0x115/0x920 [ 201.596221][ C0] exc_page_fault+0x45b/0x920 [ 201.600924][ C0] asm_exc_page_fault+0x26/0x30 [ 201.605789][ C0] RIP: 0033:0x7f1a35343e29 [ 201.610228][ C0] RSP: 002b:00007fffb01706b8 EFLAGS: 00010246 [ 201.616311][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1a353849d3 [ 201.624292][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000001200011 [ 201.632271][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 201.640264][ C0] R10: 000055556b0ec7d0 R11: 0000000000000246 R12: 0000000000000007 [ 201.648251][ C0] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 00007fffb0170850 [ 201.656255][ C0] [ 201.659300][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g9925 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 201.671547][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=3254 [ 201.679350][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g9925 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 201.690634][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 201.700602][ C0] rcu: RCU grace-period kthread stack dump: [ 201.706490][ C0] task:rcu_preempt state:I stack:26376 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 201.718427][ C0] Call Trace: [ 201.721719][ C0] [ 201.724664][ C0] __schedule+0x1b33/0x51f0 [ 201.729206][ C0] ? schedule+0x163/0x360 [ 201.733550][ C0] ? __pfx___schedule+0x10/0x10 [ 201.738439][ C0] ? schedule+0x90/0x360 [ 201.742705][ C0] ? schedule+0x90/0x360 [ 201.746960][ C0] schedule+0x163/0x360 [ 201.751132][ C0] schedule_timeout+0x15b/0x2b0 [ 201.755996][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 201.761395][ C0] ? __pfx_process_timeout+0x10/0x10 [ 201.766705][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 201.772269][ C0] ? prepare_to_swait_event+0x308/0x340 [ 201.777840][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 201.783064][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 201.787950][ C0] ? rcu_gp_init+0x1279/0x1690 [ 201.792748][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 201.797710][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 201.803016][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 201.808946][ C0] ? finish_swait+0xdb/0x200 [ 201.813557][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 201.818784][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 201.823406][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 201.828644][ C0] ? __kthread_parkme+0x1a8/0x200 [ 201.833717][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 201.838942][ C0] kthread+0x7b7/0x940 [ 201.843026][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 201.848247][ C0] ? __pfx_kthread+0x10/0x10 [ 201.852848][ C0] ? __pfx_kthread+0x10/0x10 [ 201.857457][ C0] ? __pfx_kthread+0x10/0x10 [ 201.862084][ C0] ? __pfx_kthread+0x10/0x10 [ 201.866690][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.871897][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 201.877120][ C0] ? __pfx_kthread+0x10/0x10 [ 201.881720][ C0] ret_from_fork+0x4b/0x80 [ 201.886143][ C0] ? __pfx_kthread+0x10/0x10 [ 201.890743][ C0] ret_from_fork_asm+0x1a/0x30 [ 201.895535][ C0] [ 201.898562][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 201.904907][ C0] Sending NMI from CPU 0 to CPUs 1: [ 201.910124][ C1] NMI backtrace for cpu 1 [ 201.910147][ C1] CPU: 1 UID: 0 PID: 5957 Comm: syz.1.9 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 201.910164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.910179][ C1] RIP: 0010:__lock_acquire+0xa/0xd80 [ 201.910201][ C1] Code: 0a 00 00 00 5b e9 96 3f 00 00 5b c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <48> 83 ec 40 65 48 8b 2c 25 08 10 65 93 45 31 ed 83 3d 3f 80 c0 0e [ 201.910212][ C1] RSP: 0018:ffffc90000a08bc0 EFLAGS: 00000046 [ 201.910225][ C1] RAX: 0000000000000001 RBX: ffff8880b87276d8 RCX: 0000000000000000 [ 201.910235][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b87276d8 [ 201.910244][ C1] RBP: ffffffff93651020 R08: 0000000000000001 R09: 0000000000000001 [ 201.910253][ C1] R10: dffffc0000000000 R11: fffffbfff20bd76f R12: 0000000000000001 [ 201.910262][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: 0000000000000000 [ 201.910270][ C1] FS: 00007fb4707476c0(0000) GS:ffff8881250cf000(0000) knlGS:0000000000000000 [ 201.910282][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.910292][ C1] CR2: 0000200000022000 CR3: 000000002e84c000 CR4: 00000000003526f0 [ 201.910304][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.910312][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 201.910320][ C1] Call Trace: [ 201.910327][ C1] [ 201.910336][ C1] lock_acquire+0x116/0x2f0 [ 201.910360][ C1] ? __hrtimer_run_queues+0x67b/0xd40 [ 201.910390][ C1] ? advance_sched+0xa02/0xca0 [ 201.910419][ C1] _raw_spin_lock_irq+0xd3/0x120 [ 201.910440][ C1] ? __hrtimer_run_queues+0x67b/0xd40 [ 201.910460][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 201.910484][ C1] __hrtimer_run_queues+0x67b/0xd40 [ 201.910505][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 201.910528][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 201.910548][ C1] ? sched_clock_cpu+0x77/0x4d0 [ 201.910568][ C1] ? read_tsc+0x9/0x20 [ 201.910588][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 201.910608][ C1] hrtimer_interrupt+0x403/0xa40 [ 201.910637][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 201.910654][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 201.910677][ C1] [ 201.910681][ C1] [ 201.910686][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.910702][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 201.910719][ C1] Code: c9 50 e8 e9 2e 0d 00 48 83 c4 08 4c 89 f7 e8 ad 41 00 00 e9 de 04 00 00 4c 89 f7 e8 70 38 99 0a e8 4b 76 39 00 fb 48 8b 5d c0 <48> 8d bb 18 16 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 201.910730][ C1] RSP: 0018:ffffc900046bf548 EFLAGS: 00000286 [ 201.910742][ C1] RAX: 79893e5ac2577500 RBX: ffff888033501e00 RCX: ffffffff81caacec [ 201.910752][ C1] RDX: 0000000000000000 RSI: ffffffff8e635648 RDI: ffffffff8ca0e280 [ 201.910762][ C1] RBP: ffffc900046bf590 R08: ffffffff905ebb77 R09: 1ffffffff20bd76e [ 201.910772][ C1] R10: dffffc0000000000 R11: fffffbfff20bd76f R12: 1ffff110170e74f6 [ 201.910783][ C1] R13: dffffc0000000000 R14: ffff8880b8639980 R15: ffff8880b873a7b0 [ 201.910796][ C1] ? trace_irq_enable+0x2c/0x120 [ 201.910814][ C1] ? finish_task_switch+0x1e5/0x870 [ 201.910833][ C1] __schedule+0x1b3b/0x51f0 [ 201.910861][ C1] ? schedule+0x163/0x360 [ 201.910882][ C1] ? __pfx___schedule+0x10/0x10 [ 201.910902][ C1] ? register_lock_class+0x54/0x330 [ 201.910924][ C1] ? schedule+0x90/0x360 [ 201.910944][ C1] ? schedule+0x90/0x360 [ 201.910963][ C1] schedule+0x163/0x360 [ 201.910984][ C1] schedule_timeout+0xb1/0x2b0 [ 201.911002][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 201.911025][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.911044][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 201.911056][ C1] ? wait_for_completion+0x2d4/0x600 [ 201.911069][ C1] wait_for_completion+0x32f/0x600 [ 201.911082][ C1] ? __smp_call_single_queue+0x11a/0x3a0 [ 201.911107][ C1] ? __pfx_wait_for_completion+0x10/0x10 [ 201.911120][ C1] ? __raw_spin_lock_init+0x45/0x100 [ 201.911136][ C1] ? smp_call_function_single_async+0xb4/0x110 [ 201.911157][ C1] rdmsr_safe_on_cpu+0x199/0x360 [ 201.911183][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 201.911201][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 201.911229][ C1] msr_read+0x1a7/0x270 [ 201.911247][ C1] ? __pfx_msr_read+0x10/0x10 [ 201.911263][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 201.911281][ C1] ? rw_verify_area+0x246/0x630 [ 201.911294][ C1] ? __pfx_msr_read+0x10/0x10 [ 201.911311][ C1] vfs_read+0x21f/0xb90 [ 201.911326][ C1] ? __pfx_vfs_read+0x10/0x10 [ 201.911339][ C1] ? __fget_files+0x2a/0x420 [ 201.911355][ C1] ? __fget_files+0x2a/0x420 [ 201.911371][ C1] ? __fget_files+0x39d/0x420 [ 201.911386][ C1] ? __fget_files+0x2a/0x420 [ 201.911405][ C1] ksys_read+0x19d/0x2d0 [ 201.911419][ C1] ? __pfx_ksys_read+0x10/0x10 [ 201.911435][ C1] ? do_syscall_64+0xb6/0x210 [ 201.911450][ C1] do_syscall_64+0xf3/0x210 [ 201.911464][ C1] ? clear_bhb_loop+0x45/0xa0 [ 201.911479][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.911493][ C1] RIP: 0033:0x7fb46f98e169 [ 201.911509][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.911521][ C1] RSP: 002b:00007fb470747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.911534][ C1] RAX: ffffffffffffffda RBX: 00007fb46fbb5fa0 RCX: 00007fb46f98e169 [ 201.911544][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000003 [ 201.911553][ C1] RBP: 00007fb46fa10a68 R08: 0000000000000000 R09: 0000000000000000 [ 201.911562][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.911570][ C1] R13: 0000000000000000 R14: 00007fb46fbb5fa0 R15: 00007ffdf093a6b8 [ 201.911586][ C1]